Shine a light on shadow apps

ConductorOne Docs

Administer and end an active campaign

Campaign Owners have several tools at their disposal to help guide an access review campaign through the process of gathering reviews.

View campaign progress

On the Access reviews tab of any campaign, view a dashboard summarizing the campaign’s progress and outstanding tasks.

View and manage individual reviews

On the campaign’s Tasks tab, open individual access reviews, view details, and take action:

  • See the status of the access review (completed, open, etc)
  • See the outcome of the access review (approved, denied)
  • Reassign the review, if necessary
  • Restart the review, if necessary
  • Send the assigned reviewer a reminder notification
  • Add comments
  • View audit log history
  • View related tasks

Send notifications

ConductorOne automates the process of notifying users about their open access reviews, reassignments, and impending deadlines.

Make sure that notification emails reach you: Add no-reply@conductorone.com to your email contacts list.

Automatic notifications

If the Campaign Owner has enabled campaign notifications, these notifications are sent automatically:

NotificationTime sentNotes
Campaign kickoffWhen the campaign starts

Sent to all users currently assigned access reviews for the campaign.

Only sent if the Campaign Owner opts into sending this notification when starting the campaign.

Reminder of your open access reviews
  • Weekly until three days before the campaign due date
  • Three days before the campaign due date
  • One day before the campaign due date
  • On the campaign due date
  • Daily every day past the campaign due date
Sent to all users who have open access reviews assigned to them for the campaign.
Access review assignmentWhen a task is reassigned to a new user.Sent to the user who is now assigned to the access review.
Campaign closeWhen the campaign endsSent to all users who were assigned access reviews for the campaign.

On-demand notifications

To help remind users to complete their campaign access reviews, a Campaign Owner can also send the following notifications on demand at any time during the campaign:

NotificationSent toNotes
Complete your access reviews reminderAll users currently assigned access reviews for the campaign.

A campaign-wide reminder.

Triggered by clicking Send reminders on the main campaign page.

Complete this access review reminderThe user currently assigned to a specific access review.

A reminder sent to one individual about one task.

Triggered by clicking Actions > Send Reminder on the task details page.

End the campaign

Campaigns do not end themselves, even if their scheduled end date has passed. A Campaign Owner must end the campaign.

Ending a campaign finalizes all open access reviews and archives the campaign as completed. Click End campaign to finish and close an active campaign.

  • If any reviews are outstanding, ending a campaign cancels those requests.
  • When ending the campaign, you’ll be asked if remaining open reviews should be Skipped or Revoked.

Once a campaign is ended, the configuration and access reviews for the campaign cannot be changed. However, you can still view and generate reports for the campaign.

Revoke access that was denied during the campaign

Once the campaign ends, you can manually start the process of revoking access to the entitlements that were denied during the campaign.

  1. Navigate to the campaign’s details page.

  2. On the Access reviews tab, use the Status filter to show only tasks with a Denied status.

  3. If access has already been revoked, an Access revoked message is shown in the task’s Outcome column. If this column is blank for a task, you can revoke the access manually.

  4. Click the (more actions) menu for the task and select Revoke access. A revocation task is created.

Depending on the revocation policy set on the entitlement, the task might require review and approval before the access is removed by either an automatic or manual process. ConductorOne will create and assign the tasks as appropriate.

Add a revocation step to your campaign’s review policy to automate this process. To automatically kick off a revocation flow for any access denied during the campaign, add a post-execution step to the review policy used on the campaign. See Add followup tasks to review policies to learn more.